News and updates
NSD 4.1.19 released
Mon, 11 Dec 2017
DNSSEC trigger 0.15
Wed, 06 Dec 2017
NSD 4.1.18 released
Thu, 30 Nov 2017
This release has features for saving memory and faster notification.
With --enable-packed, 33% memory savings could be had, or something
along that size. Notification of secondary servers happens in parallel,
and has faster timeouts. More sockets are used for zone transfers.
This speeds up communication with a larger set of servers. Additionally
a bug is fixed for dual-loaded parent-and-child zone configured at the
same time, when one of the zones has not loaded properly. NSD project page.
Direct Download.
Privacy: Using DNS-over-TLS with the new Quad9 DNS Service
Mon, 20 Nov 2017
Hands-on install & configure of getdns and stubby to use DNS-
over-TLS with Quad9 DNS service.Blog post.
Net::DNS 1.13 released
Wed, 18 Oct 2017
DNSSEC trigger 0.14
Tue, 10 Oct 2017
Unbound 1.6.7 released
Tue, 10 Oct 2017
Unbound 1.6.7 sets the default for trust anchor signaling to yes. This
makes a query with the key tags of the validation keys when the trust
anchor DNSKEY is retrieved.
Unbound website.
Direct Download.
Changes.
Akkerhuis inductee Internet Hall of Fame
Tue, 19 Sep 2017
Jaap Akkerhuis, NLnet Lab's senior research engineer and longtime contributor to the Internet technical community, is inducted into the Internet Hall of Fame. Follow the link below to read more on the background and contributions of Jaap's work in the past 40 year.Akkerhuis inductee IHoF2017.
Unbound 1.6.6 released
Mon, 18 Sep 2017
Unbound 1.6.6 blocks .test and .invalid by default. It has a -p option
to suppress pidfile creation (for startup script integration). And more
stats and a shared secret cache for dnscrypt. And bug fixes.
Unbound website.
Direct Download.
Changes.
Sjoera Nas joined NLnet Labs board
Wed, 13 Sep 2017
Sjoera Nas joined the board of NLnet Labs. She is an Internet and telecom privacy expert affiliated with Autoriteit Persoonsgegevens (Dutch DPA). We are delighted that she joined the board and will contribute with advice and guidance.
DNSSEC training at APTLD 72
Mon, 11 Sep 2017
Berry van Halderen and Jaap Akkerhuis will give a two day DNSSEC course during the APTLD 72 meeting in Tbilisi (Sep 12-13). The course will cover DNS fundamentals, DNSSEC building blocks, policies and hands-on with OpenDNSSEC.APTLD 72 Agenda.
NLnet Labs Annual Report 2016
Fri, 30 June 2017
We are happy to present NLnet Labs Annual report 2016. In it
we present an overview of Labs' various activities and
describe their impact.
Annual Report 2016 (PDF).
getdns 1.1.0 released
Thu, 13 Apr 2017
ldns 1.7.0 released
Tue, 20 Dec 2016
A Hybrid System for Automatic Exchanges of Routing Information
Fri, 2 December 2016
The exchange of routing information for BGP configurations is a critical functionality that help autonomous systems communicate with each other in an efficient and robust way. In this work, we propose a hybrid system for automatic exchange of routing information. It addresses security and benefits from using a hybrid model for achieving policy routing information exchange in an efficient way.
MSc. report (PDF).
Net::DNS::SEC 1.03 released
Fri, 26 Aug 2016
NSD 3.2.22 released
Tue, 14 Jun 2016
BGP Route Leaks Analysis
Fri, 6 Mar 2015
A route leak is a violation of the policies between the networks involved. In this project, we obtain routing information from differecent sources and make inferences to detect possible route leaks. These potential route leaks have been further investigated on their duration, the type of violation, and the type and origin of network that caused the leak-detection.
MSc. report (PDF).
BGP Evolution Analysis
Thu, 31 Jul 2014
The Internet has been growing rapidly for many years. A logical consequence of the growth trend is the increase in effort to discover reachability and routing information of all the networks. The project investigates the different components which together form the actual update message signal and tries to find a reason behind the growth factor.
MSc. report (PDF).
Measuring the Deployment of DNSSEC over the Internet
Thu, 2 Jul 2014
The deployment of DNSSEC is measured with the RIPE Atlas infrastructure. The results provide new insight on the distribution of DNSSEC support among resolvers, and notably show that around 90% of resolvers are DNSSEC-aware, and about 30% validate answers.
MSc. report (PDF).
|
